The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operation

Reported 21 Oct 2026 by otx · Severity: medium

The Gentlemen is a Russian-speaking ransomware-as-a-service group that emerged in mid-2025 after operating as an affiliate of LockBit and Qilin. The group offers affiliates up to 90% of ransom revenue and has claimed over 800 victims across multiple regions and sectors. The ranso